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(54) Passive entry with anti-theft function 

(57) In a passive entry comprising a car-mounted 
transmitter-receiver and one or more portable transmit- 
ter receivers, the car-mounted transmitter-receiver gen- 
erates a request signal, when any of the portable trans- 
mitter-receivers receives the request signal, an answer 
signal is transmitted in response to the request signal, 
and when the car-mounted transmitter-receiver re- 
ceives the answer signal, the car door is locked or un- 



locked. The car-mounted transmitter-receiver has a tim- 
er for counting time from transmission of the request sig- 
nal to reception of the answer signal, and when the an- 
swer signal is received, recognizes the answer signal 
as legal only when an elapsed-time value counted by 
the timer is within a valid elapsed-time value set in ad- 
vance, and exercises control of a controlled apparatus, 
such as, e.g., locking and unlocking of the car door. 
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Description 

BACKGROUND OF THE INVENTION 

1 . Field of the Invention 

[0001] The present invention relates to a passive en- 
try having an anti-theft function, and more particularly 
to a passive entry having an anti-theft function for pre- 
venting damage of relay attack by use of plural repeat- 
ers so that elapsed time from transmission of a request 
signal to a car-mounted transmitter-receiver to recep- 
tion of an answer signal is counted, and only when the 
counted time value is within a valid elapsed-time value, 
a car door is locked or unlocked. 

2. Description of the Prior Art 

[0002] Generally, a passive entry used with a car com- 
prises a transmitter-receiver mounted in the car and one 
or more portable transmitter-receivers for performing bi- 
directional signal transmission with the car-mounted 
transmitter-receiver. In the passive entry, during bidirec- 
tional signal transmission, the car-mounted transmitter- 
receiver transmits a request signal by a low frequency 
carrier signal, and if, at a transmission timing of the re- 
quest signal, the portable transmitter-receivers exist in 
the proximity of the car, that is, within a reach range of 
the low frequency carrier signal, the portable transmit- 
ter-receivers receive the request signal. At this time, the 
portable transmitter-receivers transmit an answer signal 
by a high frequency carrier signal in response to the re- 
ceived request signal, and when the car-mounted trans- 
mitter-receiver receives the answer signal, an appara- 
tus mounted in the car, e.g., a door is automatically 
locked or unlocked by the car-mounted transmitter-re- 
ceiver. That is, upon receiving a legal answer signal 
when the door is locked, the car-mounted transmitter- 
receiver automatically unlocks the door, and on the oth- 
er hand, upon receiving a legal answer signal when the 
door is unlocked, it automatically locks the door. 
[0003] According to the passive entry having such a 
function, when a person carrying a portable transmitter- 
receiver approaches a car, a car door can be automat- 
ically unlocked without having to operate the portable 
transmitter-receiver; on the other hand, when the per- 
son carrying the portable transmitter-receiver moves 
away from the car, the car door can be automatically 
locked without having to operate the portable transmit- 
ter-receiver. 

[0004] In the existing passive entry, when unlocking 
the car door, the person carrying the portable transmit- 
ter-receiver has only to approach the car, and on the 
other hand, when locking the car door, the person car- 
rying the portable transmitter-receiver has only to move 
away from the car. Therefore, the person takes no trou- 
ble to lock or unlock the car door by a key in hand or by 
operating the operation keys of the portable transmitter- 



receiver. 

[0005] As described above, in the existing passive en- 
try, when unlocking the car door, the person carrying the 
portable transmitter-receiver must approach the car. 

5 However, if repeaters are used to relay a low frequency 
carrier signal for transmitting a request signal and a high 
frequency carrier signal for transmitting an answer sig- 
nal, the car door can be unlocked even if the person car- 
rying the portable transmitter-receiver does not ap- 

10 proach the car. 

[0006] FIG. 5 is a diagram for explaining a state in 
which bidirectional communication is possible between 
a car-mounted transmitter-receiver and a portable 
transmitter-receiver if two repeaters are used when the 

is portable transmitter-receiver is distant from a car. 

[0007] In the example shown in FIG. 5, since the own- 
er (not provided with a reference numeral) of a car 51 
having a portable transmitter-receiver 52 is considera- 
bly distant from the car 51 , the portable transmitter-re- 

20 ceiver 52 is placed outside a reach range E L of a request 
signal from a car-mounted transmitter-receiver (not pro- 
vided with a reference numeral) mounted on the car 51 . 
On the other hand, since the car-mounted transmitter- 
receiver is placed outside a reach range of an answer 

25 signal from the portable transmitter-receiver 52, com- 
munication between the car-mounted transmitter-re- 
ceiver and the portable transmitter-receiver 52 is impos- 
sible in this state. 

[0008] In the example shown in FIG. 5, a first repeater 

30 53i and a second repeater 53 2 intervene between the 
car-mounted transmitter-receiver (not provided with a 
reference numeral) mounted in the car 51 and the port- 
able transmitter-receiver 52 distant from the car so that 
a request signal and an answer signal can be transmit- 

35 ted between the car-mounted transmitter-receiver and 
the portable transmitter-receiver 52. The first repeater 
53! is placed within a reach range E L of a low frequency 
carrier signal (request signal) transmitted by the car- 
mounted transmitter-receiver and the second relay 53 2 

40 is placed within a reach range E L of a low frequency car- 
rier signal (request signal) transmitted by the portable 
transmitter-receiver 52. Upon receiving the low frequen- 
cy carrier signal (request signal) from the car-mounted 
transmitter-receiver, the first repeater 53 y converts the 
low frequency carrier signal to a high frequency carrier 
signal to transmit the request signal to the second re- 
peater 53 2 . Upon receiving the request signal transmit- 
ted by the high frequency carrier signal, the second re- 
peater 53 2 converts the high frequency carrier signal to 

so a low frequency carrier signal and transmits the request 
signal to the portable transmitter-receiver 52 by the low 
frequency carrier signal so that the request signal is 
transmitted to the portable transmitter-receiver 52. On 
the other hand, upon receiving a high frequency carrier 

55 signal (answer signal) from the portable transmitter-re- 
ceiver 52, the second repeater 532 amplifies the re- 
ceived high frequency carrier signal and then transmits 
the answer signal to the first repeater 53^ by the high 
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frequency carrier signal. Upon receiving the answer sig- 
nal transmitted by the high frequency carrier signal, the 
first repeater 53 1 amplifies the received high frequency 
carrier signal and then transmits the answer signal to 
the car-mounted transmitter-receiver by the high fre- 
quency carrier signal so that the answer signal is trans- 
mitted to the car-mounted transmitter-receiver. 
[0009] In the existing passive entry, as shown in FIG. 
5, if the repeaters 53 t and 53 2 are used, since the reach 
range E L of the low frequency carrier signal (request sig- 
nal), and in some cases, a reach range of the high fre- 
quency carrier signal (answer signal) can be substan- 
tially expanded, the owner of the car 51 carrying the 
portable transmitter-receiver 52 can unlock a car door 
even if he is considerably distant from the car 51 . The 
above-described act is used to unlock a car door by ma- 
licious people without permission of a car owner and is 
called relay attack. 

[0010] The existing passive entry has the risk of a car 
door being unlocked using the repeaters 53 t and 53 2 by 
malicious people, that is, undergoing relay attack. 

SUMMARY OF THE INVENTION 

[0011] The present invention has been made in view 
of such a technical background and provides a passive 
entry having an anti-theft function for disabling opera- 
tions on a car door that are performed at positions con- 
siderably distant from the car by use of repeaters. 
[0012] In order to achieve the above object, the pas- 
sive entry haying the anti-theft function of the present 
invention comprises a car-mounted transmitter-receiver 
mounted in a car and one or more portable transmitter- 
receivers. In the passive entry, the car-mounted trans- 
mitter-receiver generates a request signal; upon receiv- 
ing the request signal, any of the portable transmitter- 
receivers transmits an answer signal in response to the 
request signal; and upon receiving the answer signal, 
the car-mounted transmitter-receiver controls an appa- 
ratus mounted in the car, such as car door locking and 
unlocking. The car-mounted transmitter-receiver has a 
timer for counting time from transmission of the request 
signal to reception of the answer signal and has a means 
for recognizing the received answer signal as legal only 
when an elapsed-time value counted by the timer is 
within a valid elapsed-time value set in advance. 
[0013] According to the above-described means, the 
car-mounted transmitter- receiver is provided with a tim- 
er for counting time from transmission of a request sig- 
nal to reception of an answer signal, and only when an 
elapsed-time value counted by the timer is within a valid 
elapsed-time value set in advance when the answer sig- 
nal is received, the received answer signal is recognized 
as a legal answer signal. In the case where repeaters 
intervene between the car-mounted transmitter- receiv- 
er and a portable transmitter-receiver, a counted 
elapsed time from the transmission of a request signal 
from the car-mounted transmitter-receiver, through re- 



ception of the request signal in a portable transmitter- 
receiver and transmission of an answer signal in re- 
sponse to the request signal from the portable transmit- 
ter-receiver, to reception of the answer signal in the car- 

5 mounted transmitter-receiver is not within a valid 
elapsed-time value set in advance because of delay of 
relay signals by the repeaters. Therefore, even if the car- 
mounted transmitter-receiver receives the answer sig- 
nal, it judges the answer signal to be illegal and nullifies 

10 various functions to be subsequently executed, so that 
control of an apparatus mounted in the car such as car 
door locking and unlocking is not performed, and the car 
can be prevented from being stolen by relay attack. 

15 BRIEF DESCRIPTION OF THE DRAWINGS 

[0014] 

FIG. 1 shows an embodiment of a passive entry 
20 having an anti-theft function of the present inven- 
tion, and is a block diagram showing a configuration 
of main portions thereof; 

FIG. 2 is a diagram for illustrating the states of sig- 
nals obtained in different parts of the passive entry 

25 shown in FIG. 1 when no relay attack is made; 

FIG. 3 is a block diagram showing a configuration 
of main portions of a passive entry having an anti- 
theft function of the present invention in the case 
where relay attack is made; 

30 FIG. 4 is a diagram for illustrating the states of sig- 
nals obtained in different parts of the passive entry 
shown in FIG. 3; and 

FIG. 5 is a diagram for explaining a state in which 
bidirectional communication is possible between a 
35 car-mounted transmitter-receiver and a portable 
transmitter-receiver if two repeaters are used when 
the portable transmitter-receiver is distant from a 
car. 

40 DESCRIPTION OF THE PREFERRED 
EMBODIMENTS 

[0015] Hereinafter, embodiments of the present in- 
vention will be described with reference to the accom- 

45 panying drawings. 

[0016] FIG. 1 shows a first embodiment of a passive 
entry having an anti-theft function of the present inven- 
tion, and is a block diagram showing a configuration of 
main portions thereof. It shows an example of using one 

so portable transmitter-receiver. 

[0017] As shown in FIG. 1 , a passive entry of the first 
embodiment comprises a car-mounted transmitter-re- 
ceiver 10 and a portable transmitter-receiver 20. In this 
case, the car-mounted transmitter- receiver 10 compris- 

55 es: a controller (CPU) 1 ; a low frequency signal trans- 
mitter (LFTX) 2; a high frequency signal receiver 
(RFRX) 3; a storage (memory) 4; a timer 5; a sensor 6; 
a low frequency transmitting antenna 7; and a high fre- 
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quency receiving antenna 8. The portable transmitter- 
receiver 20 comprises: a controller (CPU) 1 1 ; a low fre- 
quency signal receiver (LFRX) 1 2; a high frequency sig- 
nal transmitter (RFTX) 13; a storage 14 composed of 
EEPROM and the like; an operation part 15; a low fre- s 
quency receiving antenna 16; and a high frequency 
transmitting antenna 1 7. 

[0018] In the car-mounted transmitter-receiver 1 0, the 
controller 1 is connected to an input end of the low fre- 
quency signal transmitter 2, an input end of the high fre- 10 
quency signal receiver 3, the storage 4, the timer 5 t and 
the sensor 6. The low frequency signal transmitter 2 has 
an output end thereof connected to the low frequency 
transmitting antenna 7, and the high frequency signal 
receiver 3 has an input end thereof connected to the 15 
high frequency receiving antenna 8. In this case, the 
controller 1 or the storage 4 has a valid elapsed-time 
value described later stored as a program or data 
wherein the valid elapsed-time value is used to deter- 
mine whether an answer signal is legal or illegal due to 20 
relay attack. In the portable transmitter-receiver 20, the 
controller 11 is connected to an output end of the low 
frequency signal receiver 12, an input end of the high 
frequency signal transmitter 1 3, the storage 1 4, and the 
operation part 1 5. The low frequency signal receiver 12 25 
has an input end thereof connected to the low frequency 
receiving antenna 16 and the high frequency signal 
transmitter 13 has an output end thereof connected to 
the high frequency transmitting antenna 1 7. 
[0019] FIG. 2 is a diagram for illustrating the states of 30 
signals obtained in different parts of the passive entry 
shown in FIG. 1 when no relay attack is made. 
[0020] In FIG. 2, the first row (A) denotes a control 
signal supplied from the controller 1 to the low frequency 
signal transmitter 2 in the car-mounted transmitter-re- 35 
ceiver 1 0; the second row (B), a low frequency carrier 
signal outputted from the low frequency signal transmit- 
ter 2 in the car-mounted transmitter-receiver 10; the 
third row (C), an activation signal supplied from the low 
frequency signal receiver 12 to the controller 11 in the *o 
portable transmitter-receiver 20; the fourth row (D), a 
low frequency carrier signal supplied from the low fre- 
quency signal receiver 1 2 to the controller 1 1 in the port- 
able transmitter-receiver 20; the fifth row (E), low fre- 
quency data supplied from the low frequency signal re- 45 
ceiver 1 2 to the controller 1 1 in the portable transmitter- 
receiver 20; the sixth row (F), a control signal supplied 
from the controller 1 1 to the high frequency signal trans- 
mitter 1 3 in the portable transmitter-receiver 20; the sev- 
enth row (G), a control signal supplied from the high fre- so 
quency signal receiver 3 to the controller 1 in the car- 
mounted transmitter-receiver 1 0; and the eighth row (L), 
a control signal supplied from the controller 1 to a con- 
trolled apparatus. (A) to (L) indicate signals in the posi- 
tions of symbols A to L shown in FIG. 1 . 55 
[0021 ] The operation of the passive entry when no re- 
lay attack is made will be described with reference to 
FIG. 2 also. 



[0022] In the car-mounted transmitter-receiver 1 0, at 
time to, a control signal (wakeup signal) supplied from 
the controller 1 to the low frequency signal transmitter 
2 rises {FIG. 2(A)}, and a low frequency carrier signal is 
outputted from the low frequency signal transmitter 2 
{FIG. 2(B)} and transmitted from the low frequency 
transmitting antenna 7. At time t1 , the wakeup signal 
falls {FIG. 2(A)}, and the output and transmission of the 
low frequency carrier signal are stopped {FIG. 2(B)}. 
[0023] In the portable transmitter-receiver 20, at time 
t2, the low frequency carrier signal is received in the low 
frequency signal receiver 1 2 through the low frequency 
receiving antenna 16, and an activation signal supplied 
from the low frequency signal receiver 12 to the control- 
ler 11 rises {FIG. 2(C)}. 

[0024] In the car-mounted transmitter-receiver 1 0, at 
time t3 at the elapse of time T1 preset by the controller 
1 from time t1 , a control signal supplied from the con- 
troller 1 to the low frequency signal transmitter 2 rises 
{FIG. 2(A)}, and at time t4 at the elapse of a short time 
T2 required for signal transmission and the like from 
time t3, a low frequency carrier signal (request signal) 
is outputted from the low frequency signal transmitter 2 
{FIG. 2(B)} and transmitted from the low frequency 
transmitting antenna 7. 

[0025] In the portable transmitter- receiver 20, at time 
t5 at the elapse of a small time T3 required for reception 
from time t4, a request signal is received in the low fre- 
quency signal receiver 1 2 through the low frequency re- 
ceiving antenna 1 6, and the request signal is supplied 
from the low frequency signal receiver 1 2 to the control- 
ler 1 1 {FIG. 2(D)}. At the same time, low frequency data 
supplied from the low frequency signal receiver 1 2 to 
the controller 11 rises {FIG. 2(E)}. Next, at time t7 at the 
elapse of a small time T4 required for transmission from 
the time t6 at the elapse of preset time nTO from time 
t5, in response to the request signal, a control signal 
(answer signal) supplied from the controller 11 to the 
high frequency signal transmitter 13 rises {FIG. 2(F)}. 
The high frequency signal transmitter 13 forms a high 
frequency carrier signal including the supplied answer 
signal and transmits it through the high frequency trans- 
mitting antenna 1 7. 

[0026] Next, in the car-mounted transmitter-receiver 
10, at time t8 at the elapse of a short time T5 required 
for reception from time t7, the high frequency carrier sig- 
nal (answer signal) is received in the high frequency sig- 
nal receiver 3 through the high frequency receiving an- 
tenna 8, and the answer signal is supplied from the high 
frequency signal receiver 3 to the controller 1 {FIG. 2 
(G)}. At time t9, the supply of the answer signal from the 
high frequency signal receiver 3 to the controller 1 is 
stopped {FIG. 2(G)}. The controller 1 determines wheth- 
er the answer signal is legal or illegal, and upon deter- 
mining that it is a legal answer signal, supplies a control 
signal to the controlled apparatus {FIG. 2(L)}. 
[0027] When these operations are performed, the 
controller 1 of the car-mounted transmitter-receiver 1 0 
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controls the timer 5 to count elapsed time T 
(T=T1+T2+T3+nT0+T4+T5) from time t1, which is the 
falling point of the wakeup signal, to time t8, which is the 
point of supplying the answer signal to the controller 1 , 
and obtains the elapsed-time value. The controller 1 
locks or unlocks a car door only when the elapsed-time 
value is within a valid elapsed-time value set in advance. 
As the valid elapsed-time value, a theoretical elapsed 
time T plus a slight margin time T Y , usually 300 to 350 
us, is used. 

[0028] Although time T1 may be fixed in the above 
processing, if it is changed for each transmission of a 
request signal, such an illegal act that the request signal 
is copied for use can be prevented. Although time nTO 
may be fixed, it may be set as follows. That is, one cycle 
TO of pulse wave of the request signal is used as a base 
and is multiplied by a given number n to produce time 
nTO, which is decided by the controller 1 of the car- 
mounted transmitter-receiver 1 0 for each transmission 
of the request signal. The time nTO is transmitted, in- 
cluded in the request signal, and the controller 1 1 trans- 
mits an answer signal after the indicated time nTO elaps- 
es. This method is also effective for preventing illegal 
acts. 

[0029] FIG. 3 shows a passive entry having an anti- 
theft function of the present invention in the case where 
relay attack is made, and is a block diagram showing a 
configuration of main portions thereof. In FIG. 3, one 
portable transmitter- receiver is used and two repeaters 
intervene between the car-mounted transmitter-receiv- 
er 10 and the portable transmitter- receiver 20. 
[0030] It is understood that components in FIG. 3 that 
are identical to components in FIG. 1 are identified by 
the same reference numerals. 

[0031] As shown in FIG. 3, in the case where relay 
attack is made, the passive entry comprises the car- 
mounted transmitter-receiver 1 0, the portable transmit- 
ter-receiver 20, and a first repeater 30 v and a second 
repeater 30 2 . In this case, the car-mounted transmitter- 
receiver 1 0 is identical with the car-mounted transmitter- 
receiver 10 shown in FIG. 1. The portable transmitter- 
receiver 20 is identical with the portable transmitter-re- 
ceiver 20 shown in FIG. 1. 

[0032] In the first repeater 30 1 , a low frequency signal 
receiver 21 is connected to a low frequency receiving 
antenna 25 at an input end thereof and to an input end 
of a frequency converting part 23 at an output end there- 
of. A high frequency signal transmitter 22 is connected 
to an output end of a high frequency signal amplifier 24 
and an input end thereof and a high frequency transmit- 
ting antenna 26 at an output end thereof. The frequency 
converting part 23 is connected to a high frequency 
transmitting/receiving antenna 27 at an output end 
thereof, and the high frequency signal amplifier 24 is 
connected to the high frequency transmitting/receiving 
antenna 27 at an input end thereof. In the second re- 
peater 30 2 , a low frequency signal transmitter 31 is con- 
nected to an output end of a frequency converting part 



33 at an input end thereof and a low frequency transmit- 
ting antenna 35 at an output end thereof. A high frequen- 
cy signal amplifier 32 is connected to a high frequency 
receiving antenna 36 at an input end thereof and a high 

5 frequency signal transmitter 34 at an output end thereof. 
The frequency converting part 33 is connected to a high 
frequency transmitting/receiving antenna 37 at an input 
end thereof and the high frequency signal transmitter 34 
is connected to the high frequency transmitting/receiv- 

10 ing antenna 37 at an output end thereof. 

[0033] FIG. 4 is a diagram for illustrating the states of 
signals obtained in different parts of the passive entry 
shown in FIG. 3. 

[0034] In FIG. 4, the first row (A) denotes a control 
15 signal supplied from the controller 1 to the low frequency 
signal transmitter 2 in the car-mounted transmitter-re- 
ceiver 10; the second row (B), a low frequency carrier 
signal outputted from the low frequency signal transmit- 
ter 2 in the car-mounted transmitter-receiver 10; the 
20 third row (H), a low frequency carrier signal supplied 
from the low frequency signal transmitter 31 to the low 
frequency transmitting antenna 35 in the second repeat- 
er 30 2 ; the fourth row (C), an activation signal supplied 
from the low frequency signal receiver 1 2 to the control- 
25 ler 1 1 in the portable transmitter-receiver 20; the fifth row 
(D), a low frequency carrier signal supplied from the low 
frequency signal receiver 12 to the controller 11 in the 
portable transmitter-receiver 20; the sixth row (E), low 
frequency data supplied from the low frequency signal 
30 receiver 1 2 to the controller 1 1 in the portable transmit- 
ter-receiver 20; the seventh row (F), a control signal sup- 
plied from the controller 11 to the high frequency signal 
transmitter 13 in the portable transmitter-receiver 20; 
the eighth row (K), an illegal control signal supplied from 
35 the high frequency signal transmitter 22 to the high fre- 
quency signal transmitter 26 in the first repeater 30 1 ; the 
ninth row (G), a control signal supplied from the high 
frequency signal receiver 3 to the controller 1 in the car- 
mounted transmitter-receiver 10; and the tenth (L), a 
^0 control signal supplied from the controller 1 to a control- 
led apparatus. (A) to (L) indicate signals in the positions 
of symbols A to L shown in FIG. 3. 
[0035] The operation of the passive entry of a second 
embodiment that has the foregoing configuration will be 
45 described with reference to FIG. 4 also. 

[0036] In the car-mounted transmitter-receiver 1 0, at 
time tO, a control signal (wakeup signal) supplied from 
the controller 1 to the low frequency signal transmitter 
2 rises {FIG. 4(A)}, and a low frequency carrier signal is 
so outputted from the low frequency signal transmitter 2 
{FIG. 4(B)) and transmitted from the low frequency 
transmitting antenna 7. Thereafter, upon receiving the 
low frequency carrier signal through the low frequency 
receiving antenna 25 in the low frequency signal receiv- 
55 er 21, the first repeater 30 1 subjects the received low 
frequency carrier signal to frequency conversion to a 
high frequency carrier signal in the frequency converting 
part 23 and transmits the obtained high frequency car- 
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rier signal through the high frequency transmitting/re- 
ceiving antenna 27. Upon receiving the high frequency 
carrier signal in the high frequency transmitting/receiv- 
ing antenna 37, the second repeater 30 2 subjects the 
received high frequency carrier signal to frequency con- 
version to a low frequency carrier signal in the frequency 
converting part 33 and supplies the obtained low fre- 
quency carrier signal to the low frequency signal trans- 
mitter 31 . 

[0037] In the second repeater 30 2 , at time t1 , a low 
frequency carrier signal is outputted from the low fre- 
quency signal transmitter 31 {FIG. 4(H)} and transmitted 
through the low frequency transmitting antenna 35. 
[0038] In the car-mounted transmitter-receiver 1 0, at 
time t2, the wakeup signal falls {FIG. 4(A)} and the out- 
put and transmission of the low frequency carrier signal 
are stopped {FIG. 4(B)}. 

[0039] In the portable transmitter-receiver 20, at time 
t3, an illegal low frequency carrier signal is received in 
the low frequency signal receiver 1 2 through the low fre- 
quency receiving antenna 1 6, and an activation signal 
supplied from the low frequency signal receiver 12 to 
the controller 11 rises {FIG. 4(C)}. 
[0040] In the car- mounted transmitter-receiver 1 0, at 
time t4 at the elapse of the time T1 from time t2, a control 
signal supplied from the controller 1 to the low frequency 
signal transmitter 2 rises {FIG. 4(A)}, and at time t5 at 
the elapse of the short time T2 from time t4, a low fre- 
quency carrier signal (request signal) is outputted from 
the low frequency signal transmitter 2 {FIG. 4(B)} and 
transmitted from the low frequency transmitting antenna 
7. Thereafter, upon receiving the low frequency carrier 
signal (request signal) through the low frequency receiv- 
ing antenna 25 in the low frequency signal receiver 21 , 
the first repeater 30! subjects the received low frequen- 
cy carrier signal (request signal) to frequency conver- 
sion to a high frequency carrier signal in the frequency 
converting part 23 and transmits the obtained high fre- 
quency carrier signal (request signal) through the high 
frequency transmitting/receiving antenna 27. Upon re- 
ceiving the high frequency carrier signal (request signal) 
in the high frequency transmitting/receiving antenna 37, 
the second repeater 30 2 subjects the received high fre- 
quency carrier signal (request signal) to frequency con- 
version to a low frequency carrier signal (request signal) 
in the frequency converting part 33 and supplies the ob- 
tained low frequency carrier signal (request signal) to 
the low frequency signal transmitter 31 . 
[0041] In the second repeater 30 2 , at time t6 at the 
elapse of time T6 from time t5, an illegal low frequency 
carrier signal (illegal request signal) is outputted from 
the low frequency signal transmitter 31 {FIG. 4(H)} and 
transmitted from the low frequency transmitting antenna 
35. 

[0042] The time T6 is time required for signal process- 
ing and the like in the first repeater 30^ and the second 
repeater 30 2 after the car-mounted transmitter-receiver 
10 transmits the low frequency carrier signal (request 



signal) until the second repeater 30 2 transmits the illegal 
low frequency carrier signal (illegal request signal). 
[0043] In the portable transmitter-receiver 20, at time 
t7 at the elapse of the short time T3 from time t6, the low 
5 frequency carrier signal (request signal) is received in 
the low frequency signal receiver 1 2 through the low fre- 
quency receiving antenna 1 6, the request signal is sup- 
plied from the low frequency signal receiver 12 to the 
controller 11 {FIG. 4(D)}, and at the same time, low fre- 
io quency data supplied from the low frequency signal re- 
ceiver 12 to the controller 11 rises {FIG. 4(E)}. 
[0044] At time t9 at the elapse of time T4 after the 
elapse of the time nTO from the time t7, in response to 
the request signal, a control signal (answer signal) sup- 
's plied from the control 11 to the high frequency signal 
transmitter 1 3 rises {FIG. 4(F)}. The high frequency sig- 
nal transmitter 13 forms a high frequency carrier signal 
including the supplied answer signal and transmits it 
through the high frequency transmitting antenna 17. 
20 Thereafter, upon receiving the high frequency carrier 
signal (answer signal) through the high frequency re- 
ceiving antenna 36, the second repeater 30 2 amplifies 
the received high frequency carrier signal (answer sig- 
nal) in the high frequency signal amplifier 32 and trans- 
25 mits the high frequency carrier signal (answer signal) by 
the high frequency signal transmitter 34 from the high 
frequency transmitting/receiving antenna 37. Upon re- 
ceiving the high frequency carrier signal (answer signal) 
through the high frequency transmitting/receiving an- 
30 tenna 27, the first repeater 30^ supplies the received 
high frequency carrier signal (answer signal) to the high 
frequency signal transmitter 22 in the high frequency 
signal amplifier 24. 

[0045] In the first repeater 30^ at time t10 at the 

35 elapse of a short time T7 from time t9, an illegal high 
frequency carrier signal (illegal answer signal) is output- 
ted from the high frequency signal transmitter 22 {FIG. 
4(K)} and transmitted from the high frequency transmit- 
ting antenna 36. 

40 [0046] The time T7 is time required for signal process- 
ing and the like in the first repeater 30! and the second 
repeater 30 2 after the portable transmitter-receiver 20 
transmits the high frequency carrier signal (answer sig- 
nal) until the first repeater 30! transmits the illegal low 

45 frequency carrier signal (illegal answer signal). 

[0047] In the car-mounted transmitter-receiver 1 0, at 
time t1 1 at the elapse of the short time T5 from time t1 0, 
the illegal high frequency carrier signal (illegal answer 
signal) is received in the high frequency signal receiver 

so 3 through the high frequency receiving antenna 8, and 
the illegal answer signal is supplied from the high fre- 
quency signal receiver 3 to the controller 1 {FIG. 4(G)}. 
At time t12, the supply of the illegal answer signal from 
the high frequency signal receiver 3 to the controller 1 

55 is stopped {FIG. 4(G)}. 

[0048] When these operations are performed, the 
controller 1 of the car-mounted transmitter-receiver 1 0 
controls the timer 5 to count elapsed time T 
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(T=T1+T2+T6+T3+T4+nT0+T7+T5) from time t2, 
which is the falling point of the wakeup signal, to time 
t12, which is the point of supplying the answer signal to 
the controller 1 , and obtains the elapsed-time value. The 
elapsed time V is compared with the elapsed time T 5 
(T=T1+nT0+T4+T5) obtained when no relay attack is 
made as shown in FIG. 2. The elapsed time T is longer 
by time T N (T N =T6+T3+T7), which is usually about 200 
usee. The elapsed-time value of the elapsed time T ob- 
tained by the controller 1 exceeds the valid elapsed-time 
value set in advance. 

[0049] Therefore, from the fact that the elapsed time 
T exceeds the valid elapsed-time value, the controller 
1 determines that the received answer signal is an illegal 
answer signal due to relay attack, and ignores all sub- 
sequently received signals not to generate control sig- 
nals to the controlled apparatus {FIG. 4(L)}. 
[0050] As has been described above, according to the 
passive entry of this embodiment, only when a request 
signal and an answer signal are legally transmitted di- 
rectly between the car-mounted transmitter-receiver 10 
and the portable transmitter-receiver 20, the car-mount- 
ed transmitter-receiver 1 0 locks or unlocks the car door; 
on the other hand, when the repeaters 30 1 and 30 2 in- 
tervene to transmit a request signal and an answer sig- 
nal between the car-mounted transmitter-receiver 10 
and the portable transmitter-receiver 20, control of a 
controlled apparatus such as car door locking and un- 
locking is not exercised by the car-mounted transmitter- 
receiver 10. As a result, car theft by relay attack can be 
prevented. 

[0051 ] Although only one portable transmitter-receiv- 
er 20 is used in the above-described embodiments, the 
number of portable transmitter-receivers 20 usable in 
the passive entry of the present invention is not limited 
to one and may be optionally two or more. 
[0052] Request signals may be transmitted whether 
continuously or intermittently. 

[0053] Controlled apparatuses may be a car door, an 
engine starter, and other apparatuses. 
[0054] The controller 1 , after counting an elapsed time 
T, determines whether an answer signal is legal or ille- 
gal. Alternatively, the controller 1 may discontinue sub- 
sequent processing at the moment when the timer 5 ex- 
ceeds a valid elapsed-time value. 
[0055] The passive entry may be targeted for car door 
locking/unlocking, anti-theft apparatus start/stop, en- 
gine start/stop, air conditioner start/stop, and the like. 
[0056] According to the present invention, a car- 
mounted transmitter-receiver is provided with a timer for 
counting time from transmission of a request signal to 
reception of an answer signal so that a car door is locked 
or unlocked only when an elapsed-time value counted 
by the timer is within a valid elapsed-time value set in 
advance when the answer signal is received. In the case 
where repeaters intervene between the car-mounted 
transmitter-receiver and a portable transmitter-receiver, 
a counted elapsed time from the transmission of a re- 
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quest signal from the car-mounted transmitter-receiver, 
through reception of the request signal in a portable 
transmitter-receiver and transmission of an answer sig- 
nal in response to the request signal from the portable 
transmitter-receiver, to reception of the answer signal in 
the car-mounted transmitter-receiver is not within a valid 
elapsed-time value set in advance because of delay of 
relay signals by the repeaters. Therefore, even if the car- 
mounted transmitter-receiver receives the answer sig- 
nal, it nullifies various functions to be subsequently ex- 
ecuted, so that the car door is neither locked nor un- 
locked, providing the effect of preventing the car from 
being stolen by relay attack. 
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Claims 

1 . A passive entry having an anti-theft function which 
comprises a car-mounted transmitter-receiver 

20 mounted in a car and one or more portable trans- 
mitter-receivers and in which the car-mounted 
transmitter-receiver generates a request signal; up- 
on receiving the request signal, any of the portable 
transmitter- receivers transmits an answer signal in 
25 response to the request signal; and upon receiving 
the answer signal, the car-mounted transmitter-re- 
ceiver controls an apparatus mounted in the car, 
wherein the car-mounted transmitter-receiver has a 
timer for counting time from transmission of the re- 
30 quest signal to reception of the answer signal, and 
wherein the car-mounted transmitter-receiver rec- 
ognizes the received answer signal as legal only 
when an elapsed-time value counted by the timer 
is within a valid elapsed-time value set in advance. 

35 

2. The passive entry having an anti-theft function ac- 
cording to claim 1 , wherein the valid elapsed-time 
value is set based on an elapsed-time value count- 
ed from transmission of a request signal by the car- 

40 mounted transmitter- receiver, through reception of 
the request signal in a portable transmitter-receiver 
within a reach range of the request signal and the 
transmission of an answer signal in response to the 
request signal, to reception of the answer signal in 
45 the car-mounted transmitter-receiver. 
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